You must log in or # to comment.
Upstream infrastructure was compromised. Implying it’s a fault with Notepad++ fault is disingenuous. What OSS maintainer is going to think, “I need to pick a hosting provider that’s not going to get hacked by the Chinese government”? Unless your favorite editor is being hosted on infrastructure hardened against state level hackers, it’s not any better.
Did you not read the part about n++ not changing/rotating credentials? I think there’s enough blame to go around.
They also weren’t doing any kind of SSL verification for the download request, nor were they doing any kind of hash verification or signing. The former would have prevented a redirect attack in the first place, and the latter would have prevented downloaded files from being modified or swapped out.
I did not because the only part I actually cared about was the bullshit clickbait title.
outstanding
vim is all i need and is all i’ll ever need.
Emacs* is bloatware
Vims just bloat on ed
ed is the only answer.
Our true salvation
*being an acronym for “Eight Megabytes And Currently Swapping”
vim is for people who want to see the file they are editing
ed is the standard text editor https://www.gnu.org/fun/jokes/ed-msg.en.html
eMacs wasn’t compromised!
me reading this title and being transported to LiveJournal in 2005
editors are bloat, manually flip the bits you want with your HANDS like a REAL programmer
Relevant xckd
?
?
Everybody gangsta til XZ Utils gets an update
